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What is claimed is: 

1 . A method for filtering packets from an external network using a programmable 
logic device-based system ("PLD system"), comprising the steps of: 

operating the PLD system in accordance with first configuration data, wherein the PLD 
5 system filters packets from the external network in accordance with a first set of filtering rules 
based on the first configuration data; 

receiving a user input to the PLD system, wherein in response to the user input the PLD 
system operates to receive packets fi-om a computing system coupled an intemal network; 

sending at least a first packet from the computing system to the PLD system over the 
1 0 intemal network; 

in response to the first packet, sending at least a second packet from the PLD system to 
the computing system over the intemal network, wherein the second packet contains information 
rj identifying the PLD system and also information indicative of one or more commands in 
v^l accordance with the protocol, wherein the PLD system operates in accordance with the one or 
more commands; 

[f I in response to the second packet, sending at least a third packet from the computing 

system to the PLD system, wherein the third packet comprises a command in accordance with 
= the protocol and contains at least second configuration data for the PLD system; 
ry loading the second configuration into the PLD system; and 

jiO operating the PLD system in accordance with the second configuration data, wherein the 

Q PLD system filters packets from the external network in accordance with a second set of filtering 
rales based on the second configuration data, 

2. The method of claim 1, fiarther comprising the step of, after the third packet is 
received by the PLD system, saving the second configuration data contained in the third packet 

25 in non- volatile memory of the system. 

3. The method of claim 2, wherein the non-volatile memory comprises Flash 
memory, electrically erasable and programmable read only memory or battery-backed-up 
random access memory. 

4. The method of claim 1, wherein a plurality of third packets are received by the 
30 PLD system, wherein, after receiving each of the third packets, the PLD system sends at least a 
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fourth packet to the computing system over the network, wherein the fourth packets each 
acknowledge receipt of a corresponding one of the third packets. 

5. The method of claim 4, wherein after receiving each of the third packets, the PLD 
system saves second configuration data from the third packets in non-volatile memory of the 

5 system. 

6. The method of claim 5, wherein the PLD system saves the second configuration 
data in the non-volatile memory of the system from each of the third packets prior to sending 
each of the fourth packets. 

7. The method of claim 5, wherein, after receipt by the computing system of a fourth 
10 packet that acknowledges receipt by the PLD system of a final third packet, the computing 

system sends at least a fifth packet to the PLD system, wherein, in response to the fifth packet, 
the PLD system saves one or more data indicating that all of the second configuration data has 
D been received and stored in the non-volatile memory, 

n 8. The method of claim 1, wherein the second configuration data is loaded into the 

€6 PLD system in response to a user command from a user. 

Lo 9. The method of claim 8, wherein the user command comprises a command input 

^™ by a switch. 

f- 10. The method of claim 9, wherein the switch comprises a physical switch on the 

fij PLD system. 

=2^ 11. The method of claim 8, wherein the user command comprises a command entered 

C3 via the computing system. 

12. The method of claim 1 , wherein one or more display devices provide visual 
feedback of the status of the PLD system. 

13. The method of claim 12, wherein the one or more display devices comprise one or 
25 more LEDs. 

14. The method of claim 12, wherein the one or more display devices comprise a 
Hquid crystal display. 

15. The method of claim 1, wherein the PLD system provides audio feedback 
indicative of the status of the PLD system. 

30 16. The method of claim 12, wherein at least one LED indicates that the step of 

loading the second configuration data into the PLD system is in process. 
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17. The method of claim 1, wherein the PLD system processes packets sent from the 
computing system. 

18. The method of claim 1 , wherein the PLD system extracts commands in 
accordance with the protocol from the packets sent from the computing system. 

5 19. The method of claim 1 , wherein the second packet includes a version identifier for 

the PLD system. 

20. The method of claim 1 , wherein the second packet contains information that 
identifies a plurality of commands in accordance with the protocol to which the PLD system 
responds. 

10 21. The method of claim 1 , wherein the second packet contains information that is 

indicative of a location coupled to the network, wherein the location contains information that 
identifies a plurahty of commands in accordance with the protocol to which the PLD system 

Q responds. 

%^ 22. The method of claim 2 1 , wherein the location comprises storage coupled to the 

45 confiputing system. 

in 23 . The method of claim 2 1 , wherein the location comprises storage on a second 

^ network, wherein the computing system accesses the storage via the second network. 

24. The method of claim 23, wherein the information that is indicative of the location 
fU comprises an address of a node on the second network. 

25. The method of claim 23, wherein the second network comprises an Internet 
y network. 

26. The method of claim 25, wherein the information that is indicative of the location 
comprises a URL. 

27. The method of claim 1 , wherein the plurality of commands include one or more 
25 first commands to which the PLD system responds and also include one or more second 

commands to which the PLD system responds. 

28. The method of claim 27, wherein the first commands comprise core commands to 
which at least a second PLD system also responds, 

29. The method of claim 28, wherein the second commands comprise custom 
30 commands to which the second PLD system does not respond. 

30. The method of claim 1 , wherein the network comprises a local area network. 
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3 1 . The method of claim 1 , wherein the network comprises an Ethernet-based 
network. 

32. The method of claim 1 , wherein at least certain of the first, second or third 
packets comprise UDP packets. 

5 33 . The method of claim 1 , wherein at least certain of the first, second or third 

packets comprise TCP packets. 

34. The method of claim 1 , wherein at least certain of the first, second or third 
packets comprise Ethernet packets. 

35. The method of claim 1, wherein at least certain of the first, second or third 
1 0 packets comprise link layer packets. 

36. The method of claim 1, wherein at least certain of the first, second or third 
packets comprise network layer packets. 

37. The method of claim 1 , wherein at least certain of the first, second or third 
J4 packets comprise IP packets. 

m 38. The method of claim 1 , wherein at least certain of the first, second or third 

packets comprise transport layer packets. 

39. The method of claim 1, wherein at least certain of the first, second or third 
s packets comprise IPX packets. 

40. The method of claim 1 , wherein at least certain of the packets sent by the 

is computing system comprise broadcast packets having a predetermined address that are directed 
ri to a first predetermined port. 

O 4 1 . The method of claim 1 , wherein at least certain of the packets sent by the PLD 

system comprise packets having a predetermined source address that are directed to a second 
predetermined port. 

25 42. The method of claim 1 , wherein the PLD system does not implement a TCP/IP 

stack. 

43. The method of claim 1 , wherein the PLD system comprises an FPGA. 

44. The method of claim 1 , wherein the PLD system comprises an Internet security 

system. 

30 45. The method of claim 44, wherein the Litemet security system comprises a firewall 

system. 
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46. The method of claim 1 , wherein the PLD system comprises a device selected from 
the group consisting of a PDA, a mobile telephone, a portable computer, a game system, a 
household appliance, a video recording system and a paging device. 

47. The method of claim 1 , wherein the information identifying the one or more 

5 commands in accordance with the protocol to which the PLD system responds comprises XML 
code. 

48. The method of claim 1, wherein the PLD system includes a first logic unit that 
processes packets sent by the computing system, wherein the first logic unit identifies one or 
more commands in the packets sent by the computing system. 

10 49. The method of claim 1 , wherein the PLD system includes one or more second 

logic units coupled to the first logic unit that carries out one or more operations that correspond 
to the one or more commands. 

p 50. The method of claim 49, wherein the PLD system inchides one or more third 

:H logic units, wherein the third logic units carry out one or more logic operations that correspond 

45 to packets that the PLD system transmits to the computing system. 

[fj 51. The method of claim 1 , wherein the PLD system includes first and second logic 

'tf portions, wherein a first logic portion operates to communicate packets in accordance with the 
^- protocol with the computing system, wherein the second logic portion operates to carry out a 
n \ process that does not comprise communicating packets in accordance with the protocol with the 
computing system. 

O 52. The method of claim 1 , wherein the computing system operates in response to 

software that is transmitted to the computing system from the PLD system. 

53. The method of claim 1, wherein the computing system operates in response to 
software that is stored in a location identified by a packet from the PLD system. 

25 54. The method of claim 53, wherein the location comprises a storage location on a 

second network coupled to the computing system. 

55 . The method of claim 54, wherein the location is identified by a network address 

or URL. 

56. The method of claim 53, wherein the location is determined from an identifier for 
30 the PLD system. 
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57. The method of claim 1, wherein, after the PLD system operates in accordance 
with the first configuration data, in response to the user input the PLD system reconfigures to 
operate to receive packets in accordance with the one or more commands and no longer operates 
in accordance with the first configuration data, wherein, after loading of the second configuration 

5 data, the PLD system operates in accordance with the second configuration data and no longer 
operates to receive packets in accordance with the one or more commands. 

58. The method of claim 1, wherein the PLD system comprises programmable logic 
having at least a first logic portion and a second logic portion, wherein, in response to loading of 
the second configuration data, the second logic portion is reconfigured and the first logic portion 

1 0 is not reconfigured. 
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